Traq admincp/common.php Remote Code Execution

This module exploits an arbitrary command execution vulnerability in Traq 2.0 to 2.3. It's in the admincp/common.php script. This function is called in each script located in the /admicp/ directory to make sure the user has admin rights. This is a broken authorization schema because the header...

CCMPlayer 1.5 m3u Playlist Stack Based Buffer Overflow

This module exploits a stack based buffer overflow in CCMPlayer 1.5. Opening a m3u playlist with a long track name, a SEH exception record can be overwritten with parts of the controllable buffer. SEH execution is triggered after an invalid read of an injectable address, thus allowing arbitrary...

AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow

This module exploits VanDyke Software AbsoluteFTP by overflowing a filename buffer related to the LIST command. Module Options msf use exploit/windows/ftp/absolute/ftplistbof msf undefinedftplistbof show actions ...actions... msf undefinedftplistbof set ACTION msf undefinedftplistbof show options...

Citrix Provisioning Services 5.6 SP1 Streamprocess Opcode 0x40020006 Buffer Overflow

This module exploits a remote buffer overflow in the Citrix Provisioning Services 5.6 SP1 without Hotfix CPVS56SP1E043 by sending a malformed packet with the opcode 0x40020006 GetObjetsRequest to the 6905/UDP port. The module, which allows code execution under the context of SYSTEM, has been...

HTTP Cross-Site Tracing Detection

Checks if the host is vulnerable to Cross-Site Tracing XST This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Cross-Site Tracing Detection', 'Description' = 'Checks if the host is vulnerable ...

Windows Manage Certificate Authority Removal

This module allows the attacker to remove an arbitrary CA certificate from the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...

Snortreport nmap.php/nbtscan.php Remote Command Execution

This module exploits an arbitrary command execution vulnerability in nmap.php and nbtscan.php scripts. Module Options msf use exploit/multi/http/snortreport/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...

Arbitrary File Upload in '1 Flash Gallery' Wordpress Plugin

====Vulnerability==== The '1 Flash Gallery' WordPress plugin http://wordpress.org/extend/plugins/1-flash-gallery/ is vulnerable to an arbitrary file upload vulnerability. This vulnerability is present from version 1.30 until version 1.5.7. The plugin has been downloaded an estimated 460,000 times...

Freefloat FTP Server APPE Command Overflow

Title : Freefloat FTP Server APPE Command Overflow Exploit - MSF Author : Veerendra G.G SecPod Technologies www.secpod.com Vendor : http://www.freefloat.com/sv/freefloat-ftp-server/freefloat-ftp-server.php Advisory : http://secpod.org/blog/?p=310 http://secpod.org/blog/?p=384...

BisonFTP Server Remote Buffer Overflow Exploit (MSF)

Exploit for windows platform in category remote exploits Title : BisonFTP Server Remote Buffer Overflow Exploit Author : Veerendra G.G SecPod Technologies www.secpod.com Advisory : http://secpod.org/blog/?p=384 http://secpod.org/msf/bisonserverbof.rb Version : BisonFTP Server 'BisonFTP Server...

FreeFloat FTP Server Multiple Remote Buffer Overflow

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

FreeFloat FTP Server Multiple Remote Buffer Overflows

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Windows Gather Local NBD Server

Maps remote disks and logical volumes to a local Network Block Device server. Allows for forensic tools to be executed on the remote disk directly. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework nbdserver.rb Maps...

Apache Range Header DoS (Apache Killer)

The byterange filter in the Apache HTTP Server 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service memory and CPU consumption via a Range header that expresses multiple overlapping ranges, exploit called "Apache Killer". Module Options msf use...

RealNetworks Realplayer QCP Parsing Heap Overflow

This module exploits a heap overflow in Realplayer when handling a .QCP file. The specific flaw exists within qcpfformat.dll. A static 256 byte buffer is allocated on the heap and user-supplied data from the file is copied within a memory copy loop. This allows a remote attacker to execute...

Microsoft MPEG Layer-3 Audio - Stack Overflow (MS10-026) (Metasploit)

$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

FreeFloat FTP Server REST Buffer Overflow (MSF)

Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln...

FreeFloat FTP Server REST Buffer Overflow

require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln. 'KaHPeSeSe' Metasploit Module , 'License' = MSFLICENSE, 'Version...

Freefloat FTP Server - MKD Remote Buffer Overflow (Metasploit)

Freefloat FTP Server - MKD Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'Freefloat FTP Server MKD Command Stack Overflow', 'Description' = %q This module exploits a buffer overflow vulnerability found in the MKD command in the Freefloat FTP server. , 'Author' = 'C4SS!0...

VNC Server (Reflective Injection), Windows Reverse HTTP Stager (wininet)

Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 444 include Msf::Payload::Stager...